Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. 2024/11/07 08:48:51 ignoring optional flag "sandboxArg"="0" 2024/11/07 08:48:51 ignoring optional flag "type"="gce" 2024/11/07 08:48:51 parsed 1 programs [ 105.345911][ T4559] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 106.979606][ T4586] chnl_net:caif_netlink_parms(): no params data found [ 107.033199][ T4586] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.040590][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.048623][ T4586] device bridge_slave_0 entered promiscuous mode [ 107.058048][ T4586] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.065244][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.073415][ T4586] device bridge_slave_1 entered promiscuous mode [ 107.097462][ T4586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.109180][ T4586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.142334][ T4586] team0: Port device team_slave_0 added [ 107.151863][ T4586] team0: Port device team_slave_1 added [ 107.182055][ T4586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.190600][ T4586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.218160][ T4586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.230778][ T4586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.239162][ T4586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.266634][ T4586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.307546][ T4586] device hsr_slave_0 entered promiscuous mode [ 107.314674][ T4586] device hsr_slave_1 entered promiscuous mode [ 108.059662][ T4586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.076908][ T4586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.088881][ T4586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.110764][ T4586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.213658][ T4586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.229322][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.239389][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.251502][ T4586] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.268244][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.277786][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.287580][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.294661][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.317647][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.326994][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.336920][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.345609][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.352752][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.364581][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.374329][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.396655][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.411672][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.420618][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.432116][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.441408][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.453221][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.462748][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.481091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.507073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.518203][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.720709][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.735707][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.753036][ T4586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.782282][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.791448][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.811839][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.820951][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.833192][ T4586] device veth0_vlan entered promiscuous mode [ 108.844821][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.866611][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.883432][ T4586] device veth1_vlan entered promiscuous mode [ 108.929183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.946320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.962943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.972997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.985173][ T4586] device veth0_macvtap entered promiscuous mode [ 108.999590][ T4586] device veth1_macvtap entered promiscuous mode [ 109.019125][ T4586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.030273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.039465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.048498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.057791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.089257][ T4586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.098457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.108975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.121597][ T4586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.131189][ T4586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.142848][ T4586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.153211][ T4586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.692780][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.711414][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.730359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.754960][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.767350][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.788126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2024/11/07 08:49:02 executed programs: 0 [ 111.786270][ T4763] chnl_net:caif_netlink_parms(): no params data found [ 111.846789][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.899114][ T4763] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.906423][ T4763] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.914542][ T4763] device bridge_slave_0 entered promiscuous mode [ 111.923531][ T4763] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.931250][ T4763] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.939695][ T4763] device bridge_slave_1 entered promiscuous mode [ 111.977054][ T4763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.988704][ T4763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.019602][ T4763] team0: Port device team_slave_0 added [ 112.028336][ T4763] team0: Port device team_slave_1 added [ 112.053549][ T4763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.060679][ T4763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.087766][ T4763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.101157][ T4763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.108672][ T4763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.135589][ T4763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.176560][ T4763] device hsr_slave_0 entered promiscuous mode [ 112.183485][ T4763] device hsr_slave_1 entered promiscuous mode [ 112.192199][ T4763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.200236][ T4763] Cannot create hsr debugfs directory [ 113.625924][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 114.591528][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.671201][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.731825][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.507094][ T4763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.517082][ T4763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.527096][ T4763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.538416][ T4763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.640421][ T4763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.654603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.662874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.696427][ T4763] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.706513][ T5001] Bluetooth: hci0: command 0x041b tx timeout [ 115.713753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.722633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.734098][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.741224][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.749661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.758615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.767188][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.774239][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.782732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.803653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.815311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.835177][ T4763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.846283][ T4763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.859191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.869028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.878133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.887530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.896161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.904732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.913852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.922685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.931876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.940472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.049973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.057817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.070649][ T4763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.112651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.124551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.167336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.176728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.187072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.195129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.206812][ T4763] device veth0_vlan entered promiscuous mode [ 116.234959][ T4763] device veth1_vlan entered promiscuous mode [ 116.254154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.262902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.271915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.281075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.292151][ T4763] device veth0_macvtap entered promiscuous mode [ 116.304116][ T4763] device veth1_macvtap entered promiscuous mode [ 116.330447][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.341278][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.354020][ T4763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.365199][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.376491][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.388071][ T4763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.398556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.407835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.417370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.427222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.436471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.445108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.456711][ T4763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.465537][ T4763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.474730][ T4763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.484209][ T4763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.562411][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.571608][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.581569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.613142][ T154] device hsr_slave_0 left promiscuous mode [ 116.620440][ T154] device hsr_slave_1 left promiscuous mode [ 116.627225][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.634623][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.642572][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.650097][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.659088][ T154] device bridge_slave_1 left promiscuous mode [ 116.665282][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.673910][ T154] device bridge_slave_0 left promiscuous mode [ 116.680486][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.693059][ T154] device veth1_macvtap left promiscuous mode [ 116.699465][ T154] device veth0_macvtap left promiscuous mode [ 116.705549][ T154] device veth1_vlan left promiscuous mode [ 116.711845][ T154] device veth0_vlan left promiscuous mode [ 116.885604][ T154] team0 (unregistering): Port device team_slave_1 removed [ 116.899734][ T154] team0 (unregistering): Port device team_slave_0 removed [ 116.912509][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.930530][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.991964][ T154] bond0 (unregistering): Released all slaves 2024/11/07 08:49:07 executed programs: 2 [ 117.059087][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.069260][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.079437][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.277787][ C0] ================================================================== [ 117.286098][ C0] BUG: KASAN: use-after-free in __nft_trace_packet+0x137/0x150 [ 117.293680][ C0] Read of size 2 at addr ffff88802ab51e40 by task ksoftirqd/0/14 [ 117.301491][ C0] [ 117.303828][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 5.15.170-syzkaller #0 [ 117.311895][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.322215][ C0] Call Trace: [ 117.325509][ C0] [ 117.328465][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 117.333194][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 117.338829][ C0] ? _printk+0xd1/0x120 [ 117.342984][ C0] ? __wake_up_klogd+0xcc/0x100 [ 117.347849][ C0] ? panic+0x860/0x860 [ 117.352009][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 117.357488][ C0] print_address_description+0x63/0x3b0 [ 117.363144][ C0] ? __nft_trace_packet+0x137/0x150 [ 117.368356][ C0] kasan_report+0x16b/0x1c0 [ 117.372857][ C0] ? __nft_trace_packet+0x137/0x150 [ 117.378310][ C0] __nft_trace_packet+0x137/0x150 [ 117.383365][ C0] nft_do_chain+0x1453/0x16b0 [ 117.388051][ C0] ? nft_fwd_dup_netdev_offload+0x130/0x130 [ 117.394091][ C0] ? nf_nat_inet_fn+0x549/0xb60 [ 117.398953][ C0] ? nf_nat_packet+0xf0/0xf0 [ 117.403635][ C0] nft_do_chain_inet+0x3f8/0x680 [ 117.408596][ C0] ? nft_do_chain_arp+0x140/0x140 [ 117.413703][ C0] ? nf_nat_ipv4_local_in+0x2b6/0x5a0 [ 117.419087][ C0] ? nft_do_chain_arp+0x140/0x140 [ 117.424332][ C0] nf_hook_slow+0xae/0x1e0 [ 117.428852][ C0] NF_HOOK+0x26b/0x410 [ 117.432966][ C0] ? NF_HOOK+0x410/0x410 [ 117.437229][ C0] ? ip_local_deliver+0x190/0x190 [ 117.442361][ C0] ? ip_rcv_finish_core+0xc40/0x1b40 [ 117.447685][ C0] ? NF_HOOK+0x410/0x410 [ 117.451924][ C0] ? ip_local_deliver+0x10d/0x190 [ 117.457056][ C0] NF_HOOK+0x364/0x410 [ 117.461131][ C0] ? ip_rcv_core+0xb50/0xb50 [ 117.465724][ C0] ? ip_local_deliver+0x190/0x190 [ 117.470761][ C0] ? ip_rcv_core+0xb50/0xb50 [ 117.475369][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 117.481013][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 117.486696][ C0] __netif_receive_skb+0x1c6/0x530 [ 117.491824][ C0] ? read_lock_is_recursive+0x10/0x10 [ 117.497217][ C0] ? deliver_ptype_list_skb+0x3a0/0x3a0 [ 117.502791][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 117.508803][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 117.513859][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 117.519164][ C0] process_backlog+0x363/0x7f0 [ 117.523943][ C0] ? rps_trigger_softirq+0x230/0x230 [ 117.529234][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 117.535320][ C0] ? print_irqtrace_events+0x210/0x210 [ 117.540813][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 117.546036][ C0] __napi_poll+0xc7/0x440 [ 117.550449][ C0] net_rx_action+0x617/0xda0 [ 117.555075][ C0] ? net_tx_action+0x8e0/0x8e0 [ 117.559864][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 117.566015][ C0] handle_softirqs+0x3a7/0x930 [ 117.570801][ C0] ? run_ksoftirqd+0xc6/0x120 [ 117.575584][ C0] ? do_softirq+0x240/0x240 [ 117.580448][ C0] ? preempt_schedule_common+0xa6/0xd0 [ 117.586116][ C0] ? run_ksoftirqd+0xa3/0x120 [ 117.590795][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 117.596179][ C0] run_ksoftirqd+0xc6/0x120 [ 117.600688][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 117.605973][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 117.611351][ C0] ? smpboot_thread_fn+0x4d6/0x9d0 [ 117.616458][ C0] ? smpboot_thread_fn+0x5d5/0x9d0 [ 117.621590][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 117.626978][ C0] smpboot_thread_fn+0x51b/0x9d0 [ 117.631959][ C0] kthread+0x3f6/0x4f0 [ 117.636043][ C0] ? cpu_report_death+0x180/0x180 [ 117.641100][ C0] ? kthread_blkcg+0xd0/0xd0 [ 117.645701][ C0] ret_from_fork+0x1f/0x30 [ 117.650167][ C0] [ 117.653435][ C0] [ 117.655772][ C0] Allocated by task 14: [ 117.659934][ C0] __kasan_slab_alloc+0x8e/0xc0 [ 117.664790][ C0] slab_post_alloc_hook+0x53/0x380 [ 117.670645][ C0] kmem_cache_alloc_node+0x121/0x2c0 [ 117.675946][ C0] __alloc_skb+0xdd/0x590 [ 117.680329][ C0] synproxy_send_client_synack+0x1b6/0xf20 [ 117.686246][ C0] nft_synproxy_eval_v4+0x3c6/0x610 [ 117.691557][ C0] nft_synproxy_do_eval+0x359/0xa60 [ 117.696758][ C0] nft_do_chain+0x467/0x16b0 [ 117.701450][ C0] nft_do_chain_inet+0x3f8/0x680 [ 117.706402][ C0] nf_hook_slow+0xae/0x1e0 [ 117.710825][ C0] NF_HOOK+0x26b/0x410 [ 117.714895][ C0] NF_HOOK+0x364/0x410 [ 117.719054][ C0] __netif_receive_skb+0x1c6/0x530 [ 117.724472][ C0] process_backlog+0x363/0x7f0 [ 117.729245][ C0] __napi_poll+0xc7/0x440 [ 117.733591][ C0] net_rx_action+0x617/0xda0 [ 117.738181][ C0] handle_softirqs+0x3a7/0x930 [ 117.742938][ C0] run_ksoftirqd+0xc6/0x120 [ 117.747433][ C0] smpboot_thread_fn+0x51b/0x9d0 [ 117.752365][ C0] kthread+0x3f6/0x4f0 [ 117.756428][ C0] ret_from_fork+0x1f/0x30 [ 117.760857][ C0] [ 117.763186][ C0] Freed by task 14: [ 117.766988][ C0] kasan_set_track+0x4b/0x80 [ 117.771592][ C0] kasan_set_free_info+0x1f/0x40 [ 117.776528][ C0] ____kasan_slab_free+0xd8/0x120 [ 117.781582][ C0] slab_free_freelist_hook+0xdd/0x160 [ 117.786953][ C0] kmem_cache_free+0x91/0x1f0 [ 117.791631][ C0] nft_synproxy_eval_v4+0x3ce/0x610 [ 117.796844][ C0] nft_synproxy_do_eval+0x359/0xa60 [ 117.802231][ C0] nft_do_chain+0x467/0x16b0 [ 117.806983][ C0] nft_do_chain_inet+0x3f8/0x680 [ 117.811950][ C0] nf_hook_slow+0xae/0x1e0 [ 117.816375][ C0] NF_HOOK+0x26b/0x410 [ 117.820455][ C0] NF_HOOK+0x364/0x410 [ 117.824562][ C0] __netif_receive_skb+0x1c6/0x530 [ 117.826012][ T5001] Bluetooth: hci0: command 0x040f tx timeout [ 117.829770][ C0] process_backlog+0x363/0x7f0 [ 117.829812][ C0] __napi_poll+0xc7/0x440 [ 117.829833][ C0] net_rx_action+0x617/0xda0 [ 117.849472][ C0] handle_softirqs+0x3a7/0x930 [ 117.854272][ C0] run_ksoftirqd+0xc6/0x120 [ 117.858810][ C0] smpboot_thread_fn+0x51b/0x9d0 [ 117.863779][ C0] kthread+0x3f6/0x4f0 [ 117.867880][ C0] ret_from_fork+0x1f/0x30 [ 117.872415][ C0] [ 117.874753][ C0] The buggy address belongs to the object at ffff88802ab51dc0 [ 117.874753][ C0] which belongs to the cache skbuff_head_cache of size 232 [ 117.889579][ C0] The buggy address is located 128 bytes inside of [ 117.889579][ C0] 232-byte region [ffff88802ab51dc0, ffff88802ab51ea8) [ 117.902990][ C0] The buggy address belongs to the page: [ 117.908650][ C0] page:ffffea0000aad440 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ab51 [ 117.918808][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 117.926555][ C0] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888144bf1140 [ 117.935818][ C0] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 117.944744][ C0] page dumped because: kasan: bad access detected [ 117.951391][ C0] page_owner tracks the page as allocated [ 117.957324][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 14, ts 117276334509, free_ts 111959197179 [ 117.974786][ C0] get_page_from_freelist+0x322a/0x33c0 [ 117.980346][ C0] __alloc_pages+0x272/0x700 [ 117.984958][ C0] new_slab+0xbb/0x4b0 [ 117.989145][ C0] ___slab_alloc+0x6f6/0xe10 [ 117.993747][ C0] kmem_cache_alloc_node+0x1ba/0x2c0 [ 117.999037][ C0] __alloc_skb+0xdd/0x590 [ 118.003362][ C0] synproxy_send_client_synack+0x1b6/0xf20 [ 118.009165][ C0] nft_synproxy_eval_v4+0x3c6/0x610 [ 118.014361][ C0] nft_synproxy_do_eval+0x359/0xa60 [ 118.019578][ C0] nft_do_chain+0x467/0x16b0 [ 118.024298][ C0] nft_do_chain_inet+0x3f8/0x680 [ 118.029415][ C0] nf_hook_slow+0xae/0x1e0 [ 118.033938][ C0] NF_HOOK+0x26b/0x410 [ 118.038293][ C0] NF_HOOK+0x364/0x410 [ 118.042389][ C0] __netif_receive_skb+0x1c6/0x530 [ 118.047497][ C0] process_backlog+0x363/0x7f0 [ 118.052436][ C0] page last free stack trace: [ 118.057100][ C0] free_unref_page_prepare+0xc34/0xcf0 [ 118.062565][ C0] free_unref_page+0x95/0x2d0 [ 118.067235][ C0] kasan_depopulate_vmalloc_pte+0x66/0x80 [ 118.072952][ C0] __apply_to_page_range+0x9bf/0xcc0 [ 118.078238][ C0] kasan_release_vmalloc+0x96/0xb0 [ 118.083461][ C0] __purge_vmap_area_lazy+0x15ae/0x1740 [ 118.089148][ C0] _vm_unmap_aliases+0x453/0x4e0 [ 118.094086][ C0] __vunmap+0x72e/0xa20 [ 118.098242][ C0] bpf_jit_free+0x92/0x180 [ 118.102671][ C0] process_one_work+0x8a1/0x10c0 [ 118.107602][ C0] worker_thread+0xaca/0x1280 [ 118.112439][ C0] kthread+0x3f6/0x4f0 [ 118.116510][ C0] ret_from_fork+0x1f/0x30 [ 118.120930][ C0] [ 118.123380][ C0] Memory state around the buggy address: [ 118.129034][ C0] ffff88802ab51d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 118.137123][ C0] ffff88802ab51d80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 118.145271][ C0] >ffff88802ab51e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.153442][ C0] ^ [ 118.159649][ C0] ffff88802ab51e80: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 118.167831][ C0] ffff88802ab51f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.175975][ C0] ================================================================== [ 118.184058][ C0] Disabling lock debugging due to kernel taint [ 118.190448][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.197758][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G B 5.15.170-syzkaller #0 [ 118.207211][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.217322][ C0] Call Trace: [ 118.220687][ C0] [ 118.223611][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 118.228316][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 118.233945][ C0] ? panic+0x860/0x860 [ 118.238012][ C0] panic+0x318/0x860 [ 118.241899][ C0] ? check_panic_on_warn+0x1d/0xa0 [ 118.247002][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 118.252411][ C0] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 118.258401][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 118.264319][ C0] ? _raw_spin_unlock+0x40/0x40 [ 118.269214][ C0] ? print_memory_metadata+0xe2/0x140 [ 118.274585][ C0] check_panic_on_warn+0x7e/0xa0 [ 118.279525][ C0] ? __nft_trace_packet+0x137/0x150 [ 118.284751][ C0] end_report+0x6d/0xf0 [ 118.288994][ C0] kasan_report+0x18e/0x1c0 [ 118.293618][ C0] ? __nft_trace_packet+0x137/0x150 [ 118.298826][ C0] __nft_trace_packet+0x137/0x150 [ 118.303857][ C0] nft_do_chain+0x1453/0x16b0 [ 118.308554][ C0] ? nft_fwd_dup_netdev_offload+0x130/0x130 [ 118.314450][ C0] ? nf_nat_inet_fn+0x549/0xb60 [ 118.319305][ C0] ? nf_nat_packet+0xf0/0xf0 [ 118.323889][ C0] nft_do_chain_inet+0x3f8/0x680 [ 118.328818][ C0] ? nft_do_chain_arp+0x140/0x140 [ 118.333855][ C0] ? nf_nat_ipv4_local_in+0x2b6/0x5a0 [ 118.339229][ C0] ? nft_do_chain_arp+0x140/0x140 [ 118.344543][ C0] nf_hook_slow+0xae/0x1e0 [ 118.348966][ C0] NF_HOOK+0x26b/0x410 [ 118.353035][ C0] ? NF_HOOK+0x410/0x410 [ 118.357264][ C0] ? ip_local_deliver+0x190/0x190 [ 118.362277][ C0] ? ip_rcv_finish_core+0xc40/0x1b40 [ 118.367550][ C0] ? NF_HOOK+0x410/0x410 [ 118.371783][ C0] ? ip_local_deliver+0x10d/0x190 [ 118.376801][ C0] NF_HOOK+0x364/0x410 [ 118.380862][ C0] ? ip_rcv_core+0xb50/0xb50 [ 118.385445][ C0] ? ip_local_deliver+0x190/0x190 [ 118.390490][ C0] ? ip_rcv_core+0xb50/0xb50 [ 118.395082][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 118.400710][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 118.406521][ C0] __netif_receive_skb+0x1c6/0x530 [ 118.411652][ C0] ? read_lock_is_recursive+0x10/0x10 [ 118.417118][ C0] ? deliver_ptype_list_skb+0x3a0/0x3a0 [ 118.422660][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 118.428833][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 118.433869][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 118.439073][ C0] process_backlog+0x363/0x7f0 [ 118.443840][ C0] ? rps_trigger_softirq+0x230/0x230 [ 118.449293][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 118.455316][ C0] ? print_irqtrace_events+0x210/0x210 [ 118.460782][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 118.465988][ C0] __napi_poll+0xc7/0x440 [ 118.470330][ C0] net_rx_action+0x617/0xda0 [ 118.474923][ C0] ? net_tx_action+0x8e0/0x8e0 [ 118.479677][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 118.485674][ C0] handle_softirqs+0x3a7/0x930 [ 118.490469][ C0] ? run_ksoftirqd+0xc6/0x120 [ 118.495416][ C0] ? do_softirq+0x240/0x240 [ 118.499940][ C0] ? preempt_schedule_common+0xa6/0xd0 [ 118.505407][ C0] ? run_ksoftirqd+0xa3/0x120 [ 118.510547][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 118.515853][ C0] run_ksoftirqd+0xc6/0x120 [ 118.520377][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 118.525616][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 118.530981][ C0] ? smpboot_thread_fn+0x4d6/0x9d0 [ 118.536191][ C0] ? smpboot_thread_fn+0x5d5/0x9d0 [ 118.541304][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 118.546676][ C0] smpboot_thread_fn+0x51b/0x9d0 [ 118.551640][ C0] kthread+0x3f6/0x4f0 [ 118.555722][ C0] ? cpu_report_death+0x180/0x180 [ 118.560786][ C0] ? kthread_blkcg+0xd0/0xd0 [ 118.565390][ C0] ret_from_fork+0x1f/0x30 [ 118.569897][ C0] [ 118.573376][ C0] Kernel Offset: disabled [ 118.577724][ C0] Rebooting in 86400 seconds..